Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File:                     qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier:          6JCv+fqYaHqd/CnODS3L8JkE1LYfWlmyLdVUG/rzpd4=
Subject key identifier:   0C:BA:EA:98:38:5B:67:99:4A:D1:AE:C8:E5:7A:35:41:A9:B0:9D:97
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer:       /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial:       019CAAFD5E79EFCF80821BCB1B07AA1EABFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number:          05BB
Signing time:             Sun 01 Mar 2026 20:00:57 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:57 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:57 +0000
Files and hashes:         1: R-A88u_7TVFzeF3MLF_IUotQ8KA.roa (hash: RUUXOIqRtUvH0luniWno3KPfTm4c2x/0O7KFhMXc0/g=)
                          2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: cmusw+oZ/VpXIe0QCvgB6Ft3kdECWrweHuCbVGSF1Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:5e:79:ef:cf:80:82:1b:cb:1b:07:aa:1e:ab:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
        Validity
            Not Before: Mar  1 20:00:57 2026 GMT
            Not After : Mar  2 20:00:57 2026 GMT
        Subject: CN=0cbaea98385b67994ad1aec8e57a3541a9b09d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:a1:d8:30:d7:ac:29:ff:8f:da:6f:74:bc:
                    bd:f8:76:45:64:cc:51:2a:88:9b:a1:bf:19:03:cf:
                    ff:d7:76:ed:5a:78:25:3b:9b:f1:13:47:c6:29:d7:
                    6a:d4:68:e2:31:16:0d:44:d9:34:ce:fb:cc:19:db:
                    c6:96:30:9b:43:0d:2e:49:36:93:da:2f:f2:98:4f:
                    7c:92:e3:0d:8d:d1:44:ff:12:d3:fa:91:c9:ad:1d:
                    a4:50:c8:54:18:33:6b:e8:22:db:c4:7c:51:b8:7c:
                    b0:f0:da:ed:c0:06:50:85:1f:5d:cf:22:1b:2e:27:
                    c7:22:80:91:11:e7:46:4c:90:dd:22:a6:0b:fa:46:
                    68:a3:12:fc:88:52:cb:24:a0:9b:69:a0:16:6a:19:
                    b2:ad:13:21:ff:48:1c:28:ef:b9:57:37:fd:2b:1f:
                    fd:ad:f4:a2:98:6f:5f:f8:cb:10:55:1c:b7:3f:5f:
                    aa:08:23:6c:08:a2:55:cc:18:99:ec:ef:af:1f:be:
                    c4:28:65:da:32:ab:df:99:3b:39:e1:b8:83:db:d5:
                    72:dd:bf:07:e4:19:11:0e:60:86:80:b1:97:e1:1f:
                    f5:ac:4c:8e:9d:e4:87:72:ff:f2:56:0e:49:54:5a:
                    d9:4b:8d:85:e7:3f:b5:1b:92:0d:36:49:76:db:4e:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BA:EA:98:38:5B:67:99:4A:D1:AE:C8:E5:7A:35:41:A9:B0:9D:97
            X509v3 Authority Key Identifier:
                keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3c:ac:8d:49:19:63:14:5d:48:8b:d0:7e:8c:26:ff:53:83:
         e4:f4:d9:67:6a:45:ac:a6:1f:ea:a1:17:c6:2d:98:a5:1e:d9:
         b7:98:85:87:62:86:4b:62:e3:0c:69:d7:95:b6:0f:9f:59:09:
         31:e4:17:2b:2d:cf:e4:f7:76:72:a4:17:2a:61:98:9a:0f:f4:
         25:29:f5:72:e7:e1:b9:c3:f7:45:25:2c:17:3a:db:78:84:51:
         a1:2b:76:b8:4b:6a:17:eb:33:57:15:ae:c8:11:81:2d:dc:ee:
         97:66:c3:22:18:78:54:4f:be:09:7d:b5:0d:cd:78:94:3b:e2:
         1f:e0:33:a4:b6:3a:aa:df:a9:21:5b:ff:8c:de:81:7e:07:c8:
         53:ad:67:f6:ff:93:da:15:f5:80:47:02:ce:7f:98:16:63:11:
         65:32:76:17:5d:df:f0:1e:fc:3a:44:27:67:36:80:01:45:71:
         ad:85:07:22:17:fb:f2:bd:84:4b:f5:23:3c:64:06:25:e1:11:
         6f:48:6b:2d:98:c0:34:1e:40:93:00:37:20:f3:66:b3:b9:93:
         18:d8:34:1c:8b:e0:59:f1:80:49:77:7c:5e:3a:24:0d:d3:0b:
         4d:85:b0:bb:36:ed:5a:3e:00:22:c4:1b:c2:9e:b7:66:d4:56:
         ac:1f:95:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:09:47 2026 by rpki-client